operator: add orgId property to console cdr

Add an extra property to the console config so Dataplane API can be deployed Signed-off-by: Santiago Jimenez Giraldo <[email protected]>
redpanda-data · Nov 22, 2023 · 83e3114 · 83e3114
1 parent d03a1bb
commit 83e3114
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 0 deletions.
diff --git a/src/go/k8s/api/vectorized/v1alpha1/console_enterprise_types.go b/src/go/k8s/api/vectorized/v1alpha1/console_enterprise_types.go
@@ -45,6 +45,9 @@ type EnterpriseLoginRedpandaCloud struct {
 
 	// AllowedOrigins indicates if response is allowed from given origin
 	AllowedOrigins []string `json:"allowedOrigins,omitempty" yaml:"allowedOrigins,omitempty"`
+
+	// OrgID is the id of the organization, use for validating auth tokens
+	OrgID string `json:"orgId" yaml:"orgId"`
 }
 
 // IsGoogleLoginEnabled returns true if Google SSO provider is enabled

diff --git a/src/go/k8s/config/crd/bases/redpanda.vectorized.io_consoles.yaml b/src/go/k8s/config/crd/bases/redpanda.vectorized.io_consoles.yaml
@@ -464,6 +464,13 @@ spec:
                     description: EnterpriseLoginRedpandaCloud defines configurable
                       fields for RedpandaCloud SSO provider
                     properties:
+                      orgId:
+                        description: OrgID refers to the Redpanda Cloud
+                          organization id that Console is running in If the
+                          OrgID is set, Console will ensure that incoming
+                          requests will only pass if the provided access token
+                          matches this org id in the custom claims
+                        type: string
                       allowedOrigins:
                         description: AllowedOrigins indicates if response is allowed
                           from given origin

diff --git a/src/go/k8s/pkg/console/configmap.go b/src/go/k8s/pkg/console/configmap.go
@@ -304,6 +304,7 @@ func (cm *ConfigMap) genLogin(
 		switch {
 		case provider.RedpandaCloud != nil:
 			enterpriseLogin.RedpandaCloud = &vectorizedv1alpha1.EnterpriseLoginRedpandaCloud{
+        OrgID:          provider.RedpandaCloud.OrgID,
 				Enabled:        provider.RedpandaCloud.Enabled,
 				Domain:         provider.RedpandaCloud.Domain,
 				Audience:       provider.RedpandaCloud.Audience,